|
 |
fab64b |
From b22fe94f6965ebdd2e0cbf2ac002e0e5f9c11789 Mon Sep 17 00:00:00 2001
|
|
|
fab64b |
From: Robbie Harwood <rharwood@redhat.com>
|
|
|
fab64b |
Date: Fri, 22 Apr 2016 10:03:22 -0400
|
|
|
fab64b |
Subject: [PATCH] krb5-1.11-run_user_0.patch
|
|
|
5af5b2 |
|
|
|
fab64b |
---
|
|
|
fab64b |
src/lib/krb5/ccache/cc_dir.c | 14 ++++++++++++++
|
|
|
fab64b |
1 file changed, 14 insertions(+)
|
|
|
fab64b |
|
|
|
fab64b |
diff --git a/src/lib/krb5/ccache/cc_dir.c b/src/lib/krb5/ccache/cc_dir.c
|
|
|
fab64b |
index 73f0fe62d..4850c0d07 100644
|
|
|
fab64b |
--- a/src/lib/krb5/ccache/cc_dir.c
|
|
|
fab64b |
+++ b/src/lib/krb5/ccache/cc_dir.c
|
|
|
5af5b2 |
@@ -61,6 +61,8 @@
|
|
|
5af5b2 |
|
|
|
5af5b2 |
#include <dirent.h>
|
|
|
5af5b2 |
|
|
|
5af5b2 |
+#define ROOT_SPECIAL_DCC_PARENT "/run/user/0"
|
|
|
5af5b2 |
+
|
|
|
5af5b2 |
extern const krb5_cc_ops krb5_dcc_ops;
|
|
|
5af5b2 |
extern const krb5_cc_ops krb5_fcc_ops;
|
|
|
5af5b2 |
|
|
|
fab64b |
@@ -237,6 +239,18 @@ verify_dir(krb5_context context, const char *dirname)
|
|
|
5af5b2 |
|
|
|
5af5b2 |
if (stat(dirname, &st) < 0) {
|
|
|
5af5b2 |
if (errno == ENOENT) {
|
|
|
5af5b2 |
+ if (strncmp(dirname, ROOT_SPECIAL_DCC_PARENT "/",
|
|
|
5af5b2 |
+ sizeof(ROOT_SPECIAL_DCC_PARENT)) == 0 &&
|
|
|
5af5b2 |
+ stat(ROOT_SPECIAL_DCC_PARENT, &st) < 0 &&
|
|
|
5af5b2 |
+ errno == ENOENT) {
|
|
|
5af5b2 |
+#ifdef USE_SELINUX
|
|
|
5af5b2 |
+ selabel = krb5int_push_fscreatecon_for(ROOT_SPECIAL_DCC_PARENT);
|
|
|
5af5b2 |
+#endif
|
|
|
5af5b2 |
+ status = mkdir(ROOT_SPECIAL_DCC_PARENT, S_IRWXU);
|
|
|
5af5b2 |
+#ifdef USE_SELINUX
|
|
|
5af5b2 |
+ krb5int_pop_fscreatecon(selabel);
|
|
|
5af5b2 |
+#endif
|
|
|
5af5b2 |
+ }
|
|
|
5af5b2 |
#ifdef USE_SELINUX
|
|
|
5af5b2 |
selabel = krb5int_push_fscreatecon_for(dirname);
|
|
|
5af5b2 |
#endif
|